home

fxdoccreatorclient.exe

DocuWorks PDF Creator

Global Graphics Software Limited

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘FXDocCreatorClient’.
Publisher:
Fuji Xerox Co, Ltd.  (signed by Global Graphics Software Limited)

Product:
DocuWorks PDF Creator

Description:
Docuworks PDF Creator Client application

Version:
2.6.5.0

MD5:
21db0e8d4b01f9bd088e32b6c8d0f2b3

SHA-1:
0847c7735f59c60f75e3265014da246adfa95ebe

SHA-256:
805bf0aa61533312b6ccb0a0960c85f861b46b8d7ef1ba2196534cf96298d5f5

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 8:47:17 AM UTC  (today)

File size:
741.9 KB (759,696 bytes)

Product version:
v2.6.5

Copyright:
Copyright © 2011 Global Graphics Software Ltd.

File type:
Executable application (Win64 EXE)

Language:
English (United States)

Common path:
C:\Program Files\fuji xerox\docuworks\bin\fxdoccreatorclient.exe

Digital Signature
Signed by:
Global Graphics Software Limited

Authority:
VeriSign, Inc.

Valid from:
5/7/2013 7:00:00 AM

Valid to:
7/6/2016 6:59:59 AM

Subject:
CN=Global Graphics Software Limited, OU=gDoc, OU=Digital ID Class 3 - Microsoft VBA Software Validation v2, O=Global Graphics Software Limited, L=Cambridge, S=Cambridgeshire, C=GB

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
3D64BC890B1B676F52E36FBB303D3F8F

File PE Metadata
Compilation timestamp:
10/26/2013 8:29:10 AM

OS version:
4.0

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
12288:grb2v0+h1zEr2MCyBFA+1o773G8GG+iutgIYg0aHg:xvbh1Y6MCykG8GG+hJzHg

Entry address:
0x3AC90

Entry point:
48, 83, EC, 28, E8, 07, 05, 00, 00, 48, 83, C4, 28, E9, BE, FC, FF, FF, FF, 25, 48, 2F, 00, 00, CC, CC, CC, CC, CC, CC, CC, CC, 40, 53, 48, 83, EC, 20, 41, 8B, 00, 48, 8B, DA, 4C, 8B, C9, 44, 8B, D8, 4C, 8B, D1, 41, 83, E3, F8, A8, 04, 74, 13, 41, 8B, 40, 08, 4D, 63, 50, 04, F7, D8, 4C, 03, D1, 48, 63, C8, 4C, 23, D1, 49, 63, C3, 4A, 8B, 14, 10, 48, 8B, 43, 10, 8B, 48, 08, 48, 03, 4B, 08, 0F, B6, 41, 03, A8, 0F, 74, 0B, 0F, B6, C0, 83, E0, F0, 48, 98, 4C, 03, C8, 4C, 33, CA, 49, 8B, C9, 48, 83, C4, 20, 5B...
 
[+]

Entropy:
6.4069

Code size:
239.5 KB (245,248 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
FXDocCreatorClient

Command:
"C:\Program Files\fuji xerox\docuworks\bin\fxdoccreatorclient.exe"


Scan fxdoccreatorclient.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.